Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
File:                     _ESm2CkBQzmKHfvvhvwdrjRBoro.mft (raw, json)
Hash identifier:          hy246DxcI3gDatYzFbufAETgIf8p+OAsdwhFM3M+nKg=
Subject key identifier:   BD:FD:5A:24:11:5B:F4:F5:61:7B:CB:CC:BA:D4:9D:15:3C:D0:E2:5A
Authority key identifier: FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
Certificate issuer:       /CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Certificate serial:       0418
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
Manifest number:          0411
Signing time:             Sat 14 Nov 2026 03:59:53 +0000
Manifest this update:     Sat 14 Nov 2026 03:59:52 +0000
Manifest next update:     Mon 16 Nov 2026 03:59:52 +0000
Files and hashes:         1: _ESm2CkBQzmKHfvvhvwdrjRBoro.crl (hash: VEr4Q1kxEvnS7nOZPQPAowaS1RhzjOqlXxG4I5t1zUo=)
                          2: 40F7518CF7B911F0A2EAB0A6DAE4EC9C.roa (hash: tFc77WdhIIRlE4uKB0sKEuV6jT/dhoYmgbo569TiCUw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636ECFAF, serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
        Validity
            Not Before: Nov 14 03:59:52 2026 GMT
            Not After : Nov 16 03:59:52 2026 GMT
        Subject: CN=6af7dcb9-f3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5c:67:ed:24:84:a4:02:46:89:4f:2b:f3:f1:
                    2b:54:38:50:6f:e2:32:40:f2:d1:c1:54:ca:ac:2e:
                    cc:fb:b8:81:98:49:0d:6b:14:36:81:3a:84:9e:0b:
                    1f:82:74:bc:89:d5:49:ea:e9:ba:52:72:fc:18:ea:
                    c9:48:b4:fd:07:00:63:4f:05:86:77:44:de:e6:2b:
                    ab:78:d5:70:e0:19:c1:3d:da:58:62:02:c3:a6:a7:
                    71:06:f5:ab:81:62:b0:c2:fb:54:07:92:df:4b:37:
                    e6:af:51:f6:32:b1:35:9b:df:96:16:07:62:20:d5:
                    e0:bd:ae:6c:cf:22:5b:e3:85:72:be:b3:b2:51:ce:
                    a3:b2:f7:5a:21:b2:e0:29:08:07:6a:2d:2c:79:92:
                    b0:6f:0c:13:9c:8c:8a:9a:be:8e:ff:70:a4:ef:f4:
                    ec:bd:a7:3e:46:ae:35:2f:85:60:90:a5:61:a6:42:
                    ac:3c:ae:3e:ec:c5:97:8d:ca:c6:98:a6:7a:d2:59:
                    da:ad:5d:c4:43:a2:19:3a:26:d9:4a:9d:9b:47:6d:
                    6d:ff:5e:3b:fe:2d:88:1d:da:74:24:f7:b3:0e:66:
                    60:f0:39:c6:63:35:3a:c2:e6:3c:3c:88:4d:73:87:
                    99:c1:c5:7f:43:b8:b6:ac:8f:d5:66:0b:8a:ac:f2:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FD:5A:24:11:5B:F4:F5:61:7B:CB:CC:BA:D4:9D:15:3C:D0:E2:5A
            X509v3 Authority Key Identifier:
                keyid:FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:63:b1:ab:bb:63:69:09:94:e0:d3:a8:a2:25:fa:34:d9:75:
         5c:49:fb:94:e9:60:ed:20:96:19:af:a5:28:e5:91:30:11:27:
         89:dc:70:d6:b8:e5:86:11:9d:17:fa:8e:71:6e:63:dd:c6:3c:
         cd:55:95:94:21:b8:c0:06:16:a9:64:11:02:20:1c:26:9c:b0:
         ef:e0:1a:09:98:f6:58:b5:0c:12:a8:d6:65:00:7c:f6:6b:80:
         8b:94:d1:77:e2:a0:87:31:88:a2:00:67:af:d6:c7:6f:b2:43:
         57:c1:ab:66:4f:d5:65:e9:50:24:c6:6c:01:18:84:4f:55:1d:
         08:21:1e:1a:df:bc:fd:31:de:46:f3:4f:12:95:29:62:8d:6a:
         da:7a:df:6b:f4:9a:2e:5f:2f:33:68:07:42:2d:6b:3e:a4:16:
         be:2a:81:9d:40:ed:c1:0d:6e:05:a7:9a:83:ee:ec:05:8f:fa:
         b3:3c:a3:69:bf:b5:56:6b:5e:3c:54:dd:73:fa:9f:85:15:84:
         87:ff:85:15:85:07:f9:d8:d7:a9:d5:d6:e1:8e:05:28:b9:18:
         b7:4c:d4:8e:f5:a7:3c:eb:be:57:e6:48:d9:1c:27:8b:2c:40:
         86:be:dd:53:d5:fe:fb:79:d1:8f:b1:19:61:29:f5:8a:59:34:
         67:d5:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----